IT Risk Manager

Amazon; London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Amazon is seeking an experienced IT Risk Manager for their team in London. This role involves enhancing the IT risk management framework across global regulated entities and contributing to compliance and strategic oversight. Ideal candidates will have significant experience in IT risk within financial services and a strong understanding of relevant frameworks.

Qualifications

• A minimum of 7 years’ experience in technology risk management.
• Good understanding of IT risk and control frameworks.
• Experience with cloud platforms risk management.

Responsibilities

• Design and implement IT risk controls and mitigation strategies.
• Support compliance with the Global IT Risk Management Framework.
• Test applications to ensure resilience and recovery objectives.

Skills

IT risk management

Regulatory compliance

Enterprise risk management

Stakeholder influencing

Education

Degree in Computer Science, IT, Engineering

Master's degree or equivalent

Tools

COBIT

NIST

ISO 27001

ITIL

Job description

Job ID: 3008337 | Amazon Payments UK Limited

This is a mid-level position ideal for candidates looking to grow their career in IT Risk Management.

Are you an Information Technology (IT) Risk Manager ready for a step-up role with within Amazon’s unique IT environment? We are looking for an experienced IT Risk Manager within the First Line of Defense (1LoD) to enhance our IT risk management and control environment. Reporting to the Senior IT Risk Manager, the successful candidate will contribute to the development of a 1st Line IT Risk program across Amazon global regulated entities. The ideal candidate must have IT risk management experience, preferably, within the payments or financial services sector.

Key job responsibilities
• Support the Global Technology Officer (GTO) to attest compliance with the Global IT Risk Management Framework and legal entity regulatory requirements.
• Design and implement IT risk controls, mitigation strategies, and remediation plans.
• Establish IT risk management policies and procedures, ensure their implementation.
• Define key risk indicators (KRIs), key performance indicators (KPIs) and SLAs for IT risk management.
• Test critical applications to ensure resilience and recovery objectives set by the regulated entities are met.
• Perform risk based deep dives to identify and understand IT risk drivers and to validate root causes of IT related loss events.
• Contribute to risk assessment of third-party IT service providers.
• Support in conduct Business Impact Analysis (BIA) to identify and classify critical IT services and systems.

BASIC QUALIFICATIONS

- Degree in Computer Science, IT, Engineering, related technical field or equivalent combination of education and relevant work experience.
- Experience in enterprise risk management (ERM), regulatory compliance, and strategic risk oversight.
- Experience in IT compliance, IT audit or IT risk management.
- Experience building cross-functional partnerships and influencing stakeholders across the organization to act without having a direct reporting relationship.
- A minimum of 7 years’ experience in technology risk, technology audit, within a financial institution, licensed money transmitter, or payments related e-commerce function.
- A good understanding of IT risk and control frameworks: COBIT, NIST, ISO 27001, ITIL or equivalent.
- Understanding of SDLC.

PREFERRED QUALIFICATIONS

- Certified Information Systems Auditor (CISA) or equivalent IT auditing and risk certification.
- Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP) or equivalent IT Risk, Governance, Security Strategy certification.
- Digital transformations experience to drive process improvements.
- A good understanding of regulatory landscape (CSSF, DORA, EBA, NIS2, SOC 2)
- Experience with cloud platforms risk management, cloud security, and compliance, including IAM, cloud incident response, and resilience testing.
- Master's degree or equivalent.

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

Posted: March 13, 2025 (Updated about 3 hours ago)

Posted: May 14, 2025 (Updated about 11 hours ago)

Posted: April 10, 2025 (Updated about 11 hours ago)

Posted: March 17, 2025 (Updated about 11 hours ago)

Posted: March 17, 2025 (Updated 1 day ago)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.